A dynamic data security full-link detection method and system

Abstract

The present invention provides a dynamic data security full-link detection method and system, which belongs to the field of data security technology, and specifically includes: determining the business module for the flow of the target monitoring data according to the data flow link of the target monitoring data, and using it as the flow business module, when the number of flow business modules is less than the preset number of modules, obtaining the historical data volume of the target monitoring data, and determining the data monitoring period of the target monitoring data in combination with the module leakage risks of different flow business modules of the target monitoring data, and using the data monitoring period to dynamically monitor the target monitoring data, thereby further reducing the leakage risk of the target monitoring data.

Description

Technical Field

[0001] The present invention belongs to the field of data security technology, and in particular relates to a dynamic data security full-link detection method and system. Background Art

[0002] With the rapid development of informatization and digitalization, enterprises inevitably face the risk of information data leakage. Once information data leakage occurs, it will inevitably have a certain degree of impact on the production and operation of the enterprise. Therefore, how to achieve secure monitoring and management of the enterprise's information data has become a technical problem that needs to be solved urgently.

[0003] In the existing technical solutions, when performing data security testing, it is often limited to a single data interface for data security testing. However, in actual business usage scenarios, data often flows dynamically between different business modules, and the data interfaces of different business modules have certain information leakage risks. Therefore, if the full-link data security testing cannot be combined with the data flow link, the data security cannot be guaranteed.

[0004] In response to the above technical problems, the present invention provides a dynamic data security full-link detection method and system. Summary of the invention

[0005] To achieve the purpose of the present invention, the present invention adopts the following technical solutions:

[0006] According to one aspect of the present invention, a dynamic data security full-link detection method is provided.

[0007] A dynamic data security full-link detection method, characterized by specifically comprising:

[0008] S1 determines the business module for the flow of the target monitoring data according to the data flow link of the target monitoring data, and uses it as the flow business module. When the number of the flow business modules is less than the preset number of modules, proceeds to the next step;

[0009] S2 obtains data interfaces of different flow business modules, and determines interface leakage risks of different data interfaces according to access flows of different data interfaces, and divides the data interfaces into risky data interfaces and safe data interfaces according to the interface leakage risks;

[0010] S3 obtains the number of risk data interfaces of different circulation business modules and the interface leakage risks of different risk data interfaces, and determines the module leakage risks of different circulation business modules in combination with the number of security data interfaces of different circulation business modules and the interface leakage risks of different security data interfaces;

[0011] S4 obtains the historical data volume of the target monitoring data, and determines the data monitoring cycle of the target monitoring data in combination with the module leakage risks of different circulation business modules of the target monitoring data, and uses the data monitoring cycle to perform dynamic monitoring of the target monitoring data.

[0012] A further technical solution is that the data flow link of the target monitoring data is determined according to the data type of the target monitoring data, and specifically determined according to the matching result of the data type of the target monitoring data.

[0013] A further technical solution is that the number of preset modules is determined according to the amount of data that needs to be monitored for leakage risk, wherein the larger the amount of data that needs to be monitored for leakage risk, the larger the number of preset modules.

[0014] A further technical solution is that, when the number of the circulation business modules is not less than the preset number of modules, the monitoring period of the target monitoring data is determined based on a preset monitoring period.

[0015] A further technical solution is to determine whether there is no risk leakage date based on the leakage risk of the interface data, specifically including:

[0016] When the leakage risk of the interface data on the date does not meet the requirement, the date is determined to be a risk leakage date.

[0017] A further technical solution is that the value range of the module leakage risk of the circulation business module is between 0 and 1, wherein the greater the module leakage risk of the circulation business module, the higher the risk of data leakage of the circulation business module.

[0018] On the other hand, the present invention provides a dynamic data security full-link detection system, which adopts the above-mentioned dynamic data security full-link detection method, and is characterized in that it specifically includes:

[0019] Business module matching module, interface risk assessment module, module risk determination module, dynamic monitoring module;

[0020] The business module matching module is responsible for determining the business module for the flow of the target monitoring data according to the data flow link of the target monitoring data, and using it as the flow business module;

[0021] The interface risk assessment module is responsible for obtaining the data interfaces of different flow business modules, and determining the interface leakage risks of different data interfaces according to the access traffic of different data interfaces, and dividing the data interfaces into risky data interfaces and safe data interfaces according to the interface leakage risks;

[0022] The module risk determination module is responsible for obtaining the number of risk data interfaces of different circulation business modules and the interface leakage risks of different risk data interfaces, and determining the module leakage risks of different circulation business modules in combination with the number of security data interfaces of different circulation business modules and the interface leakage risks of different security data interfaces;

[0023] The dynamic monitoring module is responsible for acquiring the historical data volume of the target monitoring data, and determining the data monitoring cycle of the target monitoring data in combination with the module leakage risk of different circulation business modules of the target monitoring data, and using the data monitoring cycle to perform dynamic monitoring of the target monitoring data.

[0024] The beneficial effects of the present invention are:

[0025] 1. Determine the interface leakage risks of different data interfaces according to the access traffic of different data interfaces, thereby realizing the assessment of interface leakage risks of different data interfaces from the perspective of the frequency of access traffic of data interfaces, and also laying the foundation for differentiated assessment of module leakage risks of different flow business modules of target monitoring data, thus ensuring the reliability of the monitoring results of target monitoring data.

[0026] 2. The data monitoring period of the target monitoring data is determined by utilizing the historical data volume of the target monitoring data and the module leakage risks of different circulation business modules. This not only takes into account the differences in leakage risks caused by the historical data volume of the target monitoring data, but also further combines the number of circulation business modules and the module leakage risks of different circulation business modules to achieve the determination of the data monitoring period of the target monitoring data with a higher leakage risk from the perspective of multiple data, thereby further reducing the data leakage risk of the target monitoring data.

[0027] Other features and advantages will be described in the following description. The objects and other advantages of the present invention are realized and obtained by the structures particularly pointed out in the description and drawings.

[0028] In order to make the above-mentioned objects, features and advantages of the present invention more obvious and easy to understand, preferred embodiments are given below and described in detail with reference to the accompanying drawings. BRIEF DESCRIPTION OF THE DRAWINGS

[0029] The above and other features and advantages of the present invention will become more apparent by describing in detail exemplary embodiments thereof with reference to the attached drawings.

[0030] Figure 1 It is a flow chart of a dynamic data security full-link detection method;

[0031] Figure 2is a flow chart of a method for determining the credibility of behavioral data within a divided time period;

[0032] Figure 3 It is a flow chart of a method for determining the matching degree between a user and the user portrait. DETAILED DESCRIPTION

[0033] In order to enable those skilled in the art to better understand the technical solutions in this specification, the technical solutions in the embodiments of this specification will be clearly and completely described below in conjunction with the drawings in the embodiments of this specification. Obviously, the described embodiments are only part of the embodiments of this specification, not all of the embodiments. Based on the embodiments of this specification, all other embodiments obtained by ordinary technicians in this field without creative work should fall within the scope of protection of this specification.

[0034] The following will further elaborate from two perspectives: method-based embodiments and system-based embodiments.

[0035] Method Example

[0036] To solve the above problems, according to one aspect of the present invention, Figure 1 As shown, a dynamic data security full-link detection method is provided, which is characterized by specifically including:

[0037] S1 determines the business module for the flow of the target monitoring data according to the data flow link of the target monitoring data, and uses it as the flow business module. When the number of the flow business modules is less than the preset number of modules, proceeds to the next step;

[0038] Furthermore, the data flow link of the target monitoring data is determined according to the data type of the target monitoring data, and specifically determined according to the matching result of the data type of the target monitoring data.

[0039] Specifically, the number of preset modules is determined according to the amount of data that needs to be monitored for leakage risk, wherein the larger the amount of data that needs to be monitored for leakage risk, the larger the number of preset modules.

[0040] It should be noted that when the number of the circulation business modules is not less than the preset number of modules, the monitoring period of the target monitoring data is determined based on the preset monitoring period.

[0041] S2 obtains data interfaces of different flow business modules, and determines interface leakage risks of different data interfaces according to access flows of different data interfaces, and divides the data interfaces into risky data interfaces and safe data interfaces according to the interface leakage risks;

[0042] Specifically, Figure 2 As shown, the method for determining the interface leakage risk of the data interface is:

[0043] Determine the number of users accessing the data interface on different dates and the access data traffic of different access users based on the access traffic of the data interface, and determine the leakage risk of interface data of the data interface on different dates in combination with the access data traffic of the data interface on different dates;

[0044] The leakage risk of the interface data of the data interface on different dates is used to divide the risk leakage date of the date and other risk dates, and the date leakage risk of the risk leakage date and the date leakage risk of other risk dates are determined according to the number of the risk leakage dates and the leakage risk of the interface data on different risk leakage dates, the number of other risk dates and the leakage risk of the interface data on different other risk dates;

[0045] The interface leakage risk of the data interface is determined by the date leakage risk of the risk leakage date and the date leakage risks of other risk dates.

[0046] Furthermore, the value range of the date leakage risk of the risk leakage date is between 0 and 1, wherein the greater the date leakage risk of the risk leakage date, the greater the leakage risk of the data on the risk leakage date.

[0047] It should be noted that the data interface is divided into risky data interface and safe data interface according to the interface leakage risk, which specifically includes:

[0048] It is determined whether the interface leakage risk of the data interface is within a preset risk range. If so, the data interface is determined to be a safe data interface; if not, the data interface is determined to be a risky data interface.

[0049] In another possible embodiment, the method for determining the interface leakage risk of the data interface is:

[0050] S11 determines the number of users accessing the data interface on different dates and the access data traffic of different access users based on the access traffic of the data interface, and determines the leakage risk of interface data of the data interface on different dates in combination with the access data traffic of the data interface on different dates;

[0051] S12 uses the leakage risk of the interface data of the data interface on different dates to divide the risk leakage date of the date and other risk dates, and determines whether the number ratio of the risk leakage date of the data interface is greater than the number ratio of the preset date. If so, the interface leakage risk of the data interface is determined based on the number ratio of the risk leakage date of the data interface. If not, proceed to the next step;

[0052] S13 determines the date leakage risk of the risk leakage date according to the number of the risk leakage dates and the leakage risk of the interface data of different risk leakage dates, and judges whether the date leakage risk of the risk leakage date is less than the preset leakage risk. If so, proceed to the next step; if not, proceed to step S15;

[0053] S14 determines whether there is a risk leakage date with a date leakage risk greater than a preset risk limit in the risk leakage date, if so, proceeds to the next step, if not, determines the interface leakage risk of the data interface based on the average value of the date leakage risk of the interface data on different dates;

[0054] S15 determines the date leakage risk of other risk dates based on the number of other risk dates and the leakage risk of interface data of different other risk dates, and determines the interface leakage risk of the data interface through the date leakage risk of the risk leakage date and the date leakage risk of other risk dates.

[0055] In another possible embodiment, the method for determining the interface leakage risk of the data interface is:

[0056] S21 determines the number of users accessing the data interface on different dates and the access data traffic of different access users based on the access traffic of the data interface, and determines the leakage risk of the interface data of the data interface on different dates in combination with the access data traffic of the data interface on different dates, and judges whether there is no risk leakage date based on the leakage risk of the interface data; if so, determines the interface leakage risk of the data interface based on the average value of the leakage risk of the interface data of the data interface on different dates; if not, proceeds to the next step;

[0057] S22 uses the leakage risk of the interface data of the data interface on different dates to divide the risk leakage date of the date and other risk dates, and determines whether the number of the risk leakage dates meets the requirement. If so, proceed to step S24, if not, proceed to the next step;

[0058] S23 determines the date leakage risk of the risk leakage date according to the number of the risk leakage dates and the leakage risk of the interface data of different risk leakage dates, and judges whether the date leakage risk of the risk leakage date meets the requirements, if so, proceeds to the next step, if not, determines the interface leakage risk of the data interface according to the date leakage risk of the risk leakage date;

[0059] S24 determines the date leakage risk of other risk dates based on the number of other risk dates and the leakage risk of interface data of different other risk dates, and determines the interface leakage risk of the data interface through the date leakage risk of the risk leakage date and the date leakage risk of other risk dates.

[0060] Further, judging whether there is no risk leakage date based on the leakage risk of the interface data specifically includes:

[0061] When the leakage risk of the interface data on the date does not meet the requirement, the date is determined to be a risk leakage date.

[0062] S3 obtains the number of risk data interfaces of different circulation business modules and the interface leakage risks of different risk data interfaces, and determines the module leakage risks of different circulation business modules in combination with the number of security data interfaces of different circulation business modules and the interface leakage risks of different security data interfaces;

[0063] Specifically, Figure 3 As shown, the method for determining the module leakage risk of the flow business module is:

[0064] Determine the comprehensive data leakage risk of the risk data interface of the circulation business module according to the number of risk data interfaces of the circulation business module and the interface leakage risks of different risk data interfaces;

[0065] Determining the comprehensive data leakage risk of the security data interface of the circulation business module based on the number of security data interfaces of the circulation business module and the interface leakage risks of different security data interfaces;

[0066] The number of data interfaces of the circulation business module is obtained, and the module leakage risk of the circulation business module is determined in combination with the comprehensive data leakage risk of the risk data interface of the circulation business module and the comprehensive data leakage risk of the security data interface.

[0067] In another possible embodiment, the method for determining the module leakage risk of the flow service module is:

[0068] S31 obtains the number of data interfaces of the flow service module, and determines whether the number of data interfaces is greater than the preset number of interfaces. If so, proceeds to the next step; if not, proceeds to step S34;

[0069] S32 determines whether the number of risk data interfaces of the circulation business module is greater than the preset number of interfaces. If so, determines the module leakage risk of the circulation business module based on the number of risk data interfaces of the circulation business module. If not, proceeds to the next step.

[0070] S33 determines the comprehensive data leakage risk of the risk data interface of the circulation business module according to the number of risk data interfaces of the circulation business module and the interface leakage risks of different risk data interfaces, and judges whether the comprehensive data leakage risk of the risk data interface of the circulation business module meets the requirements, if so, proceeds to the next step, if not, determines the module leakage risk of the circulation business module through the comprehensive data leakage risk of the risk data interface of the circulation business module;

[0071] S34 determines the comprehensive data leakage risk of the security data interfaces of the circulation business module through the number of security data interfaces of the circulation business module and the interface leakage risks of different security data interfaces, obtains the number of data interfaces of the circulation business module, and determines the module leakage risk of the circulation business module in combination with the comprehensive data leakage risk of the risk data interfaces of the circulation business module and the comprehensive data leakage risk of the security data interfaces.

[0072] In another possible embodiment, the method for determining the module leakage risk of the flow service module is:

[0073] Determine the module basic leakage risk of the circulation business module through the module leakage risks of different data interfaces of the circulation business module and the number of data interfaces;

[0074] When the circulation business module does not have a risk data interface, the module leakage risk of the circulation business module is determined by the module basic leakage risk;

[0075] When the circulation business module has a risk data interface:

[0076] When the number of risk data interfaces of the circulation business module is less than the preset number of interfaces:

[0077] Determine whether the circulation business module has a risk data interface whose module leakage risk is greater than a preset risk threshold, if so, proceed to the next step, if not, determine the module leakage risk of the circulation business module based on the module basic leakage risk;

[0078] Determine the comprehensive data leakage risk of the risk data interface of the circulation business module according to the number of risk data interfaces of the circulation business module and the interface leakage risks of different risk data interfaces; when the comprehensive data leakage risk of the risk data interface of the circulation business module meets the requirements, determine the module leakage risk of the circulation business module according to the module basic leakage risk;

[0079] When the number of risk data interfaces of the circulation business module is not less than the preset number of interfaces or the comprehensive data leakage risk of the risk data interfaces of the circulation business module does not meet the requirements:

[0080] The comprehensive data leakage risk of the security data interfaces of the circulation business module is determined by the number of security data interfaces of the circulation business module and the interface leakage risks of different security data interfaces, the module basic leakage risk of the circulation business module is obtained, and the module leakage risk of the circulation business module is determined in combination with the comprehensive data leakage risk of the risk data interfaces of the circulation business module and the comprehensive data leakage risk of the security data interfaces.

[0081] S4 obtains the historical data volume of the target monitoring data, and determines the data monitoring cycle of the target monitoring data in combination with the module leakage risks of different circulation business modules of the target monitoring data, and uses the data monitoring cycle to perform dynamic monitoring of the target monitoring data.

[0082] Furthermore, the value range of the module leakage risk of the circulation business module is between 0 and 1, wherein the greater the module leakage risk of the circulation business module, the higher the risk of data leakage of the circulation business module.

[0083] Specifically, the method for determining the data monitoring period of the target monitoring data is:

[0084] Determining the basic data monitoring period of the target monitoring data by using the historical data volume of the target monitoring data;

[0085] Determining the link leakage risk of the target monitoring data based on the number of circulation business modules of the target monitoring data and the module leakage risks of different circulation business modules;

[0086] The correction factor of the monitoring period of the target monitoring data is determined by utilizing the link leakage risk of the target monitoring data, and the data monitoring period of the target monitoring data is determined based on the correction factor and the basic data monitoring period of the target monitoring data.

[0087] In another possible embodiment, the method for determining the data monitoring period of the target monitoring data is:

[0088] S41 determines the basic data monitoring period of the target monitoring data by the historical data volume of the target monitoring data, and judges whether the target monitoring data has a circulation business module whose module leakage risk does not meet the requirements. If yes, proceed to step S42; if no, proceed to the next step;

[0089] S42 determines whether the number of the circulation business modules of the target monitoring data is less than the preset minimum module number limit. If so, the data monitoring period of the target monitoring data is determined based on the basic data monitoring period of the target monitoring data. If not, proceed to the next step.

[0090] S43 determines the link leakage risk of the target monitoring data based on the number of circulation business modules of the target monitoring data and the module leakage risks of different circulation business modules, and judges whether the link leakage risk of the target monitoring data meets the requirements. If so, determines the data monitoring period of the target monitoring data based on the basic data monitoring period of the target monitoring data; if not, proceeds to the next step;

[0091] S44 determines a correction factor of a monitoring period of the target monitoring data by using the link leakage risk of the target monitoring data, and determines a data monitoring period of the target monitoring data based on the correction factor and a basic data monitoring period of the target monitoring data.

[0092] System Example

[0093] On the other hand, the present invention provides a dynamic data security full-link detection system, which adopts the above-mentioned dynamic data security full-link detection method, and is characterized in that it specifically includes:

[0094] Business module matching module, interface risk assessment module, module risk determination module, dynamic monitoring module;

[0095] The business module matching module is responsible for determining the business module for the flow of the target monitoring data according to the data flow link of the target monitoring data, and using it as the flow business module;

[0096] The interface risk assessment module is responsible for obtaining the data interfaces of different flow business modules, and determining the interface leakage risks of different data interfaces according to the access traffic of different data interfaces, and dividing the data interfaces into risky data interfaces and safe data interfaces according to the interface leakage risks;

[0097] The module risk determination module is responsible for obtaining the number of risk data interfaces of different circulation business modules and the interface leakage risks of different risk data interfaces, and determining the module leakage risks of different circulation business modules in combination with the number of security data interfaces of different circulation business modules and the interface leakage risks of different security data interfaces;

[0098] The dynamic monitoring module is responsible for acquiring the historical data volume of the target monitoring data, and determining the data monitoring cycle of the target monitoring data in combination with the module leakage risk of different circulation business modules of the target monitoring data, and using the data monitoring cycle to perform dynamic monitoring of the target monitoring data.

[0099] Through the above embodiments, the present invention achieves the following beneficial effects:

[0100] 1. Determine the interface leakage risks of different data interfaces according to the access traffic of different data interfaces, thereby realizing the assessment of interface leakage risks of different data interfaces from the perspective of the frequency of access traffic of data interfaces, and also laying the foundation for differentiated assessment of module leakage risks of different flow business modules of target monitoring data, thus ensuring the reliability of the monitoring results of target monitoring data.

[0101] 2. The data monitoring period of the target monitoring data is determined by utilizing the historical data volume of the target monitoring data and the module leakage risks of different circulation business modules. This not only takes into account the differences in leakage risks caused by the historical data volume of the target monitoring data, but also further combines the number of circulation business modules and the module leakage risks of different circulation business modules to achieve the determination of the data monitoring period of the target monitoring data with a higher leakage risk from the perspective of multiple data, thereby further reducing the data leakage risk of the target monitoring data.

[0102] Each embodiment in this specification is described in a progressive manner, and the same or similar parts between the embodiments can be referred to each other, and each embodiment focuses on the differences from other embodiments. In particular, for the device, equipment, and non-volatile computer storage medium embodiments, since they are basically similar to the method embodiments, the description is relatively simple, and the relevant parts can be referred to the partial description of the method embodiment.

[0103] The above is a description of a specific embodiment of the specification. Other embodiments are within the scope of the appended claims. In some cases, the actions or steps recorded in the claims can be performed in an order different from that in the embodiments and still achieve the desired results. In addition, the processes depicted in the drawings do not necessarily require the specific order or continuous order shown to achieve the desired results. In some embodiments, multitasking and parallel processing are also possible or may be advantageous.

[0104] The above description is only one or more embodiments of this specification and is not intended to limit this specification. For those skilled in the art, one or more embodiments of this specification may have various changes and variations. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of one or more embodiments of this specification shall be included in the scope of the claims of this specification.

Claims

1. A dynamic data security full-link detection method, characterized in that: Specifically include: Determine the business module for the flow of the target monitoring data according to the data flow link of the target monitoring data, and use it as the flow business module. When the number of the flow business modules is less than the preset number of modules, proceed to the next step; Acquire different data interfaces of the flow business modules, and determine the interface leakage risks of different data interfaces according to the access traffic of different data interfaces, and divide the data interfaces into risky data interfaces and safe data interfaces according to the interface leakage risks; Obtain the number of risk data interfaces of different circulation business modules and the interface leakage risks of different risk data interfaces, and determine the module leakage risks of different circulation business modules in combination with the number of security data interfaces of different circulation business modules and the interface leakage risks of different security data interfaces; Acquire the historical data volume of the target monitoring data, determine the data monitoring cycle of the target monitoring data in combination with the module leakage risk of different circulation business modules of the target monitoring data, and use the data monitoring cycle to perform dynamic monitoring of the target monitoring data; The method for determining the data monitoring period of the target monitoring data is: Determining the basic data monitoring period of the target monitoring data by using the historical data volume of the target monitoring data; Determining the link leakage risk of the target monitoring data based on the number of circulation business modules of the target monitoring data and the module leakage risks of different circulation business modules; The correction factor of the monitoring period of the target monitoring data is determined by utilizing the link leakage risk of the target monitoring data, and the data monitoring period of the target monitoring data is determined based on the correction factor and the basic data monitoring period of the target monitoring data.

2. The dynamic data security full-link detection method according to claim 1, characterized in that: The data flow link of the target monitoring data is determined according to the data type of the target monitoring data.

3. The dynamic data security full-link detection method according to claim 1, characterized in that: The number of preset modules is determined according to the amount of data that needs to be monitored for leakage risk, wherein the larger the amount of data that needs to be monitored for leakage risk, the larger the number of preset modules.

4. The dynamic data security full-link detection method according to claim 1, characterized in that: When the number of the circulation business modules is not less than the preset number of modules, the monitoring period of the target monitoring data is determined based on the preset monitoring period.

5. The dynamic data security full-link detection method according to claim 1, characterized in that: The method for determining the interface leakage risk of the data interface is: Determine the number of users accessing the data interface on different dates and the access data traffic of different access users based on the access traffic of the data interface, and determine the leakage risk of interface data of the data interface on different dates in combination with the access data traffic of the data interface on different dates; The leakage risk of the interface data of the data interface on different dates is used to divide the risk leakage date of the date and other risk dates, and the date leakage risk of the risk leakage date and the date leakage risk of other risk dates are determined according to the number of the risk leakage dates and the leakage risk of the interface data on different risk leakage dates, the number of other risk dates and the leakage risk of the interface data on different other risk dates; The interface leakage risk of the data interface is determined by the date leakage risk of the risk leakage date and the date leakage risks of other risk dates.

6. The dynamic data security full-link detection method according to claim 1, characterized in that: The data interface is divided into risky data interface and safe data interface according to the interface leakage risk, specifically including: It is determined whether the interface leakage risk of the data interface is within a preset risk range. If so, the data interface is determined to be a safe data interface; if not, the data interface is determined to be a risky data interface.

7. The dynamic data security full-link detection method according to claim 1, characterized in that: The method for determining the module leakage risk of the circulation business module is: Determine the comprehensive data leakage risk of the risk data interface of the circulation business module according to the number of risk data interfaces of the circulation business module and the interface leakage risks of different risk data interfaces; Determining the comprehensive data leakage risk of the security data interface of the circulation business module based on the number of security data interfaces of the circulation business module and the interface leakage risks of different security data interfaces; The number of data interfaces of the circulation business module is obtained, and the module leakage risk of the circulation business module is determined in combination with the comprehensive data leakage risk of the risk data interface of the circulation business module and the comprehensive data leakage risk of the security data interface.

8. The dynamic data security full-link detection method according to claim 7, characterized in that: The value range of the module leakage risk of the circulation business module is between 0 and 1, wherein the greater the module leakage risk of the circulation business module, the higher the risk of data leakage of the circulation business module.

9. A dynamic data security full-link detection system, using a dynamic data security full-link detection method according to any one of claims 1 to 8, characterized in that: Specifically include: Business module matching module, interface risk assessment module, module risk determination module, dynamic monitoring module; The business module matching module is responsible for determining the business module for the flow of the target monitoring data according to the data flow link of the target monitoring data, and using it as the flow business module; The interface risk assessment module is responsible for obtaining the data interfaces of different flow business modules, and determining the interface leakage risks of different data interfaces according to the access traffic of different data interfaces, and dividing the data interfaces into risky data interfaces and safe data interfaces according to the interface leakage risks; The module risk determination module is responsible for obtaining the number of risk data interfaces of different circulation business modules and the interface leakage risks of different risk data interfaces, and determining the module leakage risks of different circulation business modules in combination with the number of security data interfaces of different circulation business modules and the interface leakage risks of different security data interfaces; The dynamic monitoring module is responsible for obtaining the historical data volume of the target monitoring data, and determining the data monitoring cycle of the target monitoring data in combination with the module leakage risk of different circulation business modules of the target monitoring data, and using the data monitoring cycle to perform dynamic monitoring of the target monitoring data; The method for determining the data monitoring period of the target monitoring data is: Determining the basic data monitoring period of the target monitoring data by using the historical data volume of the target monitoring data; Determining the link leakage risk of the target monitoring data based on the number of circulation business modules of the target monitoring data and the module leakage risks of different circulation business modules; The correction factor of the monitoring period of the target monitoring data is determined by utilizing the link leakage risk of the target monitoring data, and the data monitoring period of the target monitoring data is determined based on the correction factor and the basic data monitoring period of the target monitoring data.

Images